131–140 of 143 posts
Earlier quoted context omitted.
Tell me more about the contexts in which you can't use LetsEncrypt certificates.
Sure - for example, when the organization requires an OV or EV certificate.
Earlier quoted context omitted.
Sure - for example, when the organization requires an OV or EV certificate.
What’s the use case for OV/EV certs? I thought it was reasonably well established that they herald from the same era as “this site secured by Symantec” icons, and were basically just the same security as DV certs but with the wheels painted chrome and an extra tax for gullible buyers.
When we talk about the WebPKI being coercively annoying, what we're really talking about are the roots of trust that the browsers have chosen to trust. No browser requires OV/EV.
I just wanted to take a moment to say what a lifechanging tool sci-hub has been for research. In doing research for a big writing project on Mars I ended up with a folder of maybe 800 scientific and technical papers, some of them dating back to 1910. This is material it would have been hard to collect even with access to a major university library. Online publishers, meanwhile, demand extortionate per-paper fees for…
I think I'm probably HN's most fervent copyright supporter, and I want to find a way to disapprove of Sci-Hub; it feels like cheating? Like sidestepping the real issue, of how journals are organized? But I can't take myself seriously trying to argue that. Even my kids, who are both practicing scientists at institutions with official access to all these papers, use Sci-Hub to get stuff.
They didn't even have a price list on the site. The only option was to give them your full contact info, and after I did they told me a sales representative would be call me on the phone to discuss pricing. That's the last time I felt any guilt about using Sci-Hub.
Earlier quoted context omitted.
curious what “malicious” use cases a decentralized name registry enables that dns doesn’t?
you're focusing on the first part (what it enables) and not the last part (without any way to mitigate)
and also - there may be a way for the naming contract to use social recovery for keys.
Earlier quoted context omitted.
There is no traction because it's a vanity item. Most people/businesses need their websites to work on the average Joe/Jane's mobile phone, not just on some specialized browser that only a few people use. (=Chrome, Safari, Edge)
So tech here doesn't gain traction unless the average Joe already uses it? And Brave and NextDNS aren't popular enough for your threshold? Handshake is exactly what would stop the issue happening in TFA, yet everyone ignores it here. For something to go mainstream, you have to talk about it... HN is not a very good tech site if you only talk about the tech that the common person already knows about.
The projects mentioned in this thread aren't the first to offer an expanded DNS solution for one reason or another. None of them gained traction.
Earlier quoted context omitted.
Sure - for example, when the organization requires an OV or EV certificate.
What’s the use case for OV/EV certs? I thought it was reasonably well established that they herald from the same era as “this site secured by Symantec” icons, and were basically just the same security as DV certs but with the wheels painted chrome and an extra tax for gullible buyers.
Earlier quoted context omitted.
What’s the use case for OV/EV certs? I thought it was reasonably well established that they herald from the same era as “this site secured by Symantec” icons, and were basically just the same security as DV certs but with the wheels painted chrome and an extra tax for gullible buyers.
It doesn't matter, right? Because anyone who relies on OV/EV certs has chosen to rely on OV/EV certs. If we replaced the whole WebPKI edifice with a blockchain, they'd still make the same decision not to trust the baseline system. When we talk about the WebPKI being coercively annoying, what we're really talking about are the roots of trust that the browsers have chosen to trust. No browser requires OV/EV.
Earlier quoted context omitted.
if a brand was not significant enough to reach internet search significance why should they be entitled to their own tld? why should be some company "co" from country x be more entitled to their own tld than the company co with the same name from country y? If they feel they are, they can a) manually start and win the auction b) buy the tld c) use an alternative like .brandHQ,.getbrand,.usebrand or whatever d) just k…
[flagged]
Earlier quoted context omitted.
Sorry, but my best friend was one of the core developers who left. I have heard tons of stories that the public has not. Another core dev died. I said several, not all... Yes, handshake can work alongside, technically, but the leadership did not want to, in practice
"Leadership" should be used extremely loosely. Imagine the first droplets of a puddle. Sure, the water is there but it doesn't dictate the spread. "In practice" is irrelevant to how Handshake is working right now. I'm not here to convince you of the merits of Handshake, you clearly don't see nor care for it. Just clarifying facts over opinion. EDIT: FWIW, I don't know who your best friend is but JJ remaining a part o…
Earlier quoted context omitted.
"Leadership" should be used extremely loosely. Imagine the first droplets of a puddle. Sure, the water is there but it doesn't dictate the spread. "In practice" is irrelevant to how Handshake is working right now. I'm not here to convince you of the merits of Handshake, you clearly don't see nor care for it. Just clarifying facts over opinion. EDIT: FWIW, I don't know who your best friend is but JJ remaining a part o…
That's a good thing, when a project in this space keeps jugging along because a diverse group of keep believing and working, it becomes a testament to the decentralization and value of its core idea.